Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218828.roa
File: AS218828.roa (raw, json)
Hash identifier: GmDsKdAN0i6F9eScdYa331rr4JUjBG7FQAlGTCpmBms=
Subject key identifier: 90:CB:EB:DA:A6:E7:AC:00:9A:E8:D4:70:4B:92:61:C7:B6:F6:B7:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E8EC1DE89C93221093863C01A487A4B08F52038
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218828.roa
Signing time: Sun 30 Aug 2026 18:28:54 +0000
ROA not before: Sun 30 Aug 2026 18:23:54 +0000
ROA not after: Sun 29 Aug 2027 18:28:54 +0000
asID: 218828
IP address blocks: 2a13:9500:1cb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8e:c1:de:89:c9:32:21:09:38:63:c0:1a:48:7a:4b:08:f5:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 30 18:23:54 2026 GMT
Not After : Aug 29 18:28:54 2027 GMT
Subject: CN=90CBEBDAA6E7AC009AE8D4704B9261C7B6F6B7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:5c:47:03:f4:2f:54:95:76:d4:35:81:19:
06:9c:2e:90:4e:5c:29:05:ae:ec:47:88:58:73:2a:
5f:88:8d:03:9d:ea:5c:66:bd:0f:c9:6a:65:2f:07:
7e:76:94:39:6d:6f:e4:c9:8e:66:40:cd:d7:65:19:
54:c9:fc:c7:9b:26:61:87:1e:67:37:e0:c8:30:68:
05:b2:40:4f:96:71:7f:94:df:60:5d:83:f9:2b:68:
1c:d6:01:b1:9b:39:43:7c:6a:30:6b:cc:7a:b6:85:
f6:b3:49:30:ef:db:a3:f7:2a:bf:2c:c8:ff:89:87:
0f:b0:a3:c6:c3:4e:04:cc:29:2f:27:11:7f:90:9b:
85:86:9f:13:3c:9e:57:50:24:9a:59:5b:bc:d2:48:
2a:78:08:0d:8e:7c:a3:ce:fc:cb:b0:63:7c:9a:70:
ae:dd:76:97:8b:3c:b4:c1:98:ee:a5:39:67:a3:1d:
fc:85:b5:42:c9:78:68:c9:b8:17:93:63:33:f3:b9:
db:87:98:4e:f8:5a:fa:6a:b0:1e:30:00:d6:65:e1:
9a:07:51:fe:5c:1c:0b:07:a7:eb:d6:40:34:42:bb:
64:b6:a6:e2:db:c1:aa:5e:b2:67:a0:ea:93:2b:29:
3a:04:9e:2e:dc:8e:91:95:86:e8:03:42:13:4c:ac:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:EB:DA:A6:E7:AC:00:9A:E8:D4:70:4B:92:61:C7:B6:F6:B7:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1cb::/48
Signature Algorithm: sha256WithRSAEncryption
41:bd:d2:08:18:cd:da:8d:bd:bf:ec:b9:2b:8a:00:64:3f:f2:
cd:03:5b:7e:a1:fa:d3:b8:a0:e7:7e:e4:43:41:21:d5:58:3b:
94:f4:fa:73:57:ed:52:75:ad:03:46:8a:7e:2b:84:78:bb:6f:
40:d8:3e:9f:62:01:fd:8a:f8:35:17:92:d3:3d:bd:31:67:20:
83:bc:f5:9a:1e:d1:8f:c7:8a:ff:b8:d7:56:9b:cd:e4:a0:47:
90:09:28:8f:97:32:14:4b:14:c5:80:da:ad:28:10:25:00:c0:
65:36:49:45:bc:a0:31:21:44:6d:58:6b:cc:2d:0e:c0:5a:f6:
16:bb:37:f4:7f:a5:30:78:32:0d:13:49:39:c2:63:6f:42:6a:
2d:20:90:36:9a:10:58:c0:b5:4a:5c:f6:33:00:a1:16:6c:ad:
2e:f1:3e:a9:57:bb:9d:17:6e:06:d7:12:9f:bb:c8:34:f7:a6:
67:ca:61:43:f1:1c:ed:04:bb:fa:11:c3:00:8e:84:e6:f4:f0:
fc:21:85:63:2a:9d:c7:93:78:0c:39:95:00:1a:ba:97:77:58:
e0:2e:ae:bc:79:19:76:de:da:96:3d:11:2d:27:ab:69:77:7a:
a6:a9:32:d3:fb:d0:25:1d:55:eb:dd:e6:5f:ea:26:08:6c:ab:
f5:ec:a3:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUHo7B3onJMiEJOGPAGkh6Swj1IDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MzAxODIzNTRaFw0yNzA4MjkxODI4NTRaMDMxMTAvBgNV
BAMTKDkwQ0JFQkRBQTZFN0FDMDA5QUU4RDQ3MDRCOTI2MUM3QjZGNkI3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZuFxHA/QvVJV21DWBGQacLpBO
XCkFruxHiFhzKl+IjQOd6lxmvQ/JamUvB352lDltb+TJjmZAzddlGVTJ/MebJmGH
Hmc34MgwaAWyQE+WcX+U32Bdg/kraBzWAbGbOUN8ajBrzHq2hfazSTDv26P3Kr8s
yP+Jhw+wo8bDTgTMKS8nEX+Qm4WGnxM8nldQJJpZW7zSSCp4CA2OfKPO/MuwY3ya
cK7ddpeLPLTBmO6lOWejHfyFtULJeGjJuBeTYzPzuduHmE74WvpqsB4wANZl4ZoH
Uf5cHAsHp+vWQDRCu2S2puLbwapesmeg6pMrKToEni7cjpGVhugDQhNMrKoZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUkMvr2qbnrACa6NRwS5Jhx7b2t6UwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE4ODI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAHLMA0GCSqGSIb3DQEBCwUAA4IBAQBBvdIIGM3ajb2/7LkrigBkP/LNA1t+ofrT
uKDnfuRDQSHVWDuU9PpzV+1Sda0DRop+K4R4u29A2D6fYgH9ivg1F5LTPb0xZyCD
vPWaHtGPx4r/uNdWm83koEeQCSiPlzIUSxTFgNqtKBAlAMBlNklFvKAxIURtWGvM
LQ7AWvYWuzf0f6UweDINE0k5wmNvQmotIJA2mhBYwLVKXPYzAKEWbK0u8T6pV7ud
F24G1xKfu8g096ZnymFD8RztBLv6EcMAjoTm9PD8IYVjKp3Hk3gMOZUAGrqXd1jg
Lq68eRl23tqWPREtJ6tpd3qmqTLT+9AlHVXr3eZf6iYIbKv17KNQ
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:08 2026 by rpki-client